CVE-2004-0239 SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| photopost php pro | = 3.1 | No fix listed |
| photopost php pro | = 3.2 | No fix listed |
| photopost php pro | = 3.3 | No fix listed |
| photopost php pro | = 4.0 | No fix listed |
| photopost php pro | = 4.1 | No fix listed |
| photopost php pro | = 4.6 | No fix listed |
References
- 20040202 ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql mailing-list
- www.securiteam.com
- 9557 exploit vdb-entry vendor-advisory
- photopostphp-sql-injection(15008) vdb-entry